Hierarchical permissions in permission manager